Morbihan Gun Shop Reports Cyberattack Affecting 1900 Clients

A cyberattack at Douillet-Dreumont, a firearms retailer operating in Morbihan, France, compromised data associated with 1900 customers near the end of August, according to Ouest-France on October 20, 2026. The incident affected the business's customer records, although the available report does not establish which specific personal details were exposed.

A manager at the retailer's Vannes location confirmed the intrusion to Ouest-France and explained why the company did not detect it immediately. The incident also emerged amid separate claims of attacks against two other French firearms retailers, Armurerie Gilles and Armurerie Laudier.

The Douillet-Dreumont manager said the company's server arrangements and the delay before the attacker disclosed the incident complicated detection. The retailer's servers are located in Switzerland, and its data retention period is limited, according to the manager's account.

"We didn't see anything until recently. It was impossible to detect that we had been hacked. Our servers in Switzerland retain data for only 30 days, and the hacker communicates 30 days after the incident," a Douillet-Dreumont manager told Ouest-France.

The report did not specify the precise categories of information taken from the 1900 customer records or establish whether the data had been published or distributed. It also did not provide an independent technical assessment identifying the attacker or explaining the method used to access the systems.

Separate allegations involving Armurerie Gilles and Armurerie Laudier surfaced online on October 17, 2026, according to Shattered.io's October 19 report. A person using the pseudonym ChimeraZ claimed to possess databases containing 35,303 records associated with Armurerie Gilles and 3,789 associated with Armurerie Laudier, which operates in Dreux, Eure-et-Loir.

The two alleged databases total 39,092 records. Shattered.io said the figures came from the claims made by the alleged attacker and had not been independently verified or publicly confirmed by either retailer or an authority at the time of publication.

The available reporting does not establish that the claims involving Armurerie Gilles and Armurerie Laudier are connected to the confirmed intrusion at Douillet-Dreumont. Nor does it establish a connection between the cyberattack allegations and the demonstrations and public disturbances reported across France on October 17.

For the two retailers named in the online claims, the authenticity and contents of the alleged databases remained unconfirmed in the cited reporting. The available information did not establish whether the records included customer names, addresses, telephone numbers, payment information, or details related to firearm ownership.